
<!doctype html>
<html lang="en-US">
<head>
	<meta charset="UTF-8">
	<meta http-equiv="x-ua-compatible" content="ie=edge">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<link rel="profile" href="http://gmpg.org/xfn/11">
	<meta name="google-site-verification" content="woFGOBDXdYqOInoJ8yXHyUdw08AF-tC-0jmKv5r24WQ" />

	<!--[if lt IE 9]>
		<script src="https://cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv.min.js"></script>
	<![endif]-->

	<link rel="preconnect" href="//in.hotjar.com" crossorigin>
<link rel="preconnect" href="//jukebox.pathfactory.com" crossorigin>
<link rel="dns-prefetch" href="//okt.to" crossorigin>
<link rel="dns-prefetch" href="//www.facebook.com" crossorigin>
<link rel="dns-prefetch" href="//connect.facebook.net" crossorigin>
<link rel="dns-prefetch" href="//service.force.com" crossorigin>
<link rel="dns-prefetch" href="//d.la3-c1-ph2.salesforceliveagent.com" crossorigin>
<link rel="dns-prefetch" href="//ib.adnxs.com" crossorigin>
<link rel="dns-prefetch" href="//pixel.advertising.com" crossorigin>
<link rel="dns-prefetch" href="//ups.analytics.yahoo.com" crossorigin>
<link rel="dns-prefetch" href="//pixel.rubiconproject.com" crossorigin>
	<script>dataLayer = [];</script>
		<script defer>(function (w, d, s, l, i) { w[l] = w[l] || []; w[l].push({'gtm.start': new Date().getTime(), event: 'gtm.js'}); var f = d.getElementsByTagName(s)[0], j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src = 'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f); })(window, document, 'script', 'dataLayer', 'GTM-KHGG4KL');</script>
			<script type="text/javascript">
			(function(j,u,k,e,b,o,x){j["pfObject"]=b;j[b]=j[b]||function(){
				(j[b].q=j[b].q||[]).push(arguments)},j[b].l=1*new Date();o=u.createElement(k),
				x=u.getElementsByTagName(k)[0];o.async=1;o.src=e;x.parentNode.insertBefore(o,x)
			})(window,document,"script", "https://cdn-app.pathfactory.com/production/jukebox/current/jukebox.js" ,"pf");
			pf("create", "LB-727F1CFC-10479");
		</script>
		<meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />

	<!-- This site is optimized with the Yoast SEO Premium plugin v22.0 (Yoast SEO v22.0) - https://yoast.com/wordpress/plugins/seo/ -->
	<title>SSH-Snake: New Self-Modifying Worm Threatens Networks &#8211; Sysdig</title>
	<link rel="canonical" href="https://sysdig.com/blog/ssh-snake/" />
	<meta property="og:locale" content="en_US" />
	<meta property="og:type" content="article" />
	<meta property="og:title" content="SSH-Snake: New Self-Modifying Worm Threatens Networks" />
	<meta property="og:description" content="The Sysdig Threat Research Team (TRT) discovered the malicious use of a new network mapping tool called SSH-Snake that was..." />
	<meta property="og:url" content="https://sysdig.com/blog/ssh-snake/" />
	<meta property="og:site_name" content="Sysdig" />
	<meta property="article:publisher" content="https://www.facebook.com/Sysdig415/" />
	<meta property="article:published_time" content="2024-02-20T19:00:00+00:00" />
	<meta property="article:modified_time" content="2024-02-21T16:56:07+00:00" />
	<meta property="og:image" content="https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png" />
	<meta property="og:image:width" content="1201" />
	<meta property="og:image:height" content="660" />
	<meta property="og:image:type" content="image/png" />
	<meta name="author" content="Miguel Hernández" />
	<meta name="twitter:card" content="summary_large_image" />
	<meta name="twitter:image" content="https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png" />
	<meta name="twitter:creator" content="@sysdig" />
	<meta name="twitter:site" content="@sysdig" />
	<script type="application/ld+json" class="yoast-schema-graph">{"@context":"https://schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https://sysdig.com/blog/ssh-snake/#article","isPartOf":{"@id":"https://sysdig.com/blog/ssh-snake/"},"author":{"name":"Miguel Hernández","@id":"https://sysdig.com/#/schema/person/395b3a7ec0e6a833bcb449cf2e7a3019"},"headline":"SSH-Snake: New Self-Modifying Worm Threatens Networks","datePublished":"2024-02-20T19:00:00+00:00","dateModified":"2024-02-21T16:56:07+00:00","mainEntityOfPage":{"@id":"https://sysdig.com/blog/ssh-snake/"},"wordCount":1080,"publisher":{"@id":"https://sysdig.com/#organization"},"image":{"@id":"https://sysdig.com/blog/ssh-snake/#primaryimage"},"thumbnailUrl":"https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png","articleSection":["CNAPP","Falco","Runtime Insights","Sysdig Secure"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https://sysdig.com/blog/ssh-snake/","url":"https://sysdig.com/blog/ssh-snake/","name":"SSH-Snake: New Self-Modifying Worm Threatens Networks &#8211; Sysdig","isPartOf":{"@id":"https://sysdig.com/#website"},"primaryImageOfPage":{"@id":"https://sysdig.com/blog/ssh-snake/#primaryimage"},"image":{"@id":"https://sysdig.com/blog/ssh-snake/#primaryimage"},"thumbnailUrl":"https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png","datePublished":"2024-02-20T19:00:00+00:00","dateModified":"2024-02-21T16:56:07+00:00","breadcrumb":{"@id":"https://sysdig.com/blog/ssh-snake/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https://sysdig.com/blog/ssh-snake/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https://sysdig.com/blog/ssh-snake/#primaryimage","url":"https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png","contentUrl":"https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png","width":1201,"height":660},{"@type":"BreadcrumbList","@id":"https://sysdig.com/blog/ssh-snake/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://sysdig.com/"},{"@type":"ListItem","position":2,"name":"SSH-Snake: New Self-Modifying Worm Threatens Networks"}]},{"@type":"WebSite","@id":"https://sysdig.com/#website","url":"https://sysdig.com/","name":"Sysdig","description":"","publisher":{"@id":"https://sysdig.com/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://sysdig.com/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https://sysdig.com/#organization","name":"Sysdig","url":"https://sysdig.com/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://sysdig.com/#/schema/logo/image/","url":"https://sysdig.com/wp-content/uploads/sysdig-logo-new-black-cropped.svg","contentUrl":"https://sysdig.com/wp-content/uploads/sysdig-logo-new-black-cropped.svg","width":154,"height":46,"caption":"Sysdig"},"image":{"@id":"https://sysdig.com/#/schema/logo/image/"},"sameAs":["https://www.facebook.com/Sysdig415/","https://twitter.com/sysdig","https://www.linkedin.com/company/sysdig","https://www.youtube.com/c/sysdig"]},{"@type":"Person","@id":"https://sysdig.com/#/schema/person/395b3a7ec0e6a833bcb449cf2e7a3019","name":"Miguel Hernández","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https://sysdig.com/#/schema/person/image/","url":"https://secure.gravatar.com/avatar/7e84e4ff5da9e5b64dcb61fa4daec38a?s=96&d=mm&r=g","contentUrl":"https://secure.gravatar.com/avatar/7e84e4ff5da9e5b64dcb61fa4daec38a?s=96&d=mm&r=g","caption":"Miguel Hernández"},"url":"https://sysdig.com/blog/author/mhernandez/"}]}</script>
	<!-- / Yoast SEO Premium plugin. -->


<link rel='dns-prefetch' href='//app.cdn.lookbookhq.com' />
<link rel='dns-prefetch' href='//www.google.com' />
<link rel="alternate" type="application/rss+xml" title="Sysdig &raquo; Feed" href="https://sysdig.com/feed/" />
<link rel="alternate" type="application/rss+xml" title="Sysdig &raquo; Comments Feed" href="https://sysdig.com/comments/feed/" />
<link rel='stylesheet' id='v4-sysdig-main-css' href='https://sysdig.com/wp-content/themes/sysdig/public/styles/main-v4.css?ver=1708639732' type='text/css' media='all' />
<link rel='stylesheet' id='pathfactory-overlay-css' href='https://sysdig.com/wp-content/themes/sysdig/public/styles/pathfactory-overlay.css?ver=1707271340' type='text/css' media='all' />
<link rel='stylesheet' id='pathfactory-overlay-lib-css' href='https://app.cdn.lookbookhq.com/libraries/overlay/overlay.css?ver=20240129' type='text/css' media='all' />
<style id='wp-block-library-inline-css' type='text/css'>
:root{--wp-admin-theme-color:#007cba;--wp-admin-theme-color--rgb:0,124,186;--wp-admin-theme-color-darker-10:#006ba1;--wp-admin-theme-color-darker-10--rgb:0,107,161;--wp-admin-theme-color-darker-20:#005a87;--wp-admin-theme-color-darker-20--rgb:0,90,135;--wp-admin-border-width-focus:2px;--wp-block-synced-color:#7a00df;--wp-block-synced-color--rgb:122,0,223}@media (min-resolution:192dpi){:root{--wp-admin-border-width-focus:1.5px}}.wp-element-button{cursor:pointer}:root{--wp--preset--font-size--normal:16px;--wp--preset--font-size--huge:42px}:root .has-very-light-gray-background-color{background-color:#eee}:root .has-very-dark-gray-background-color{background-color:#313131}:root .has-very-light-gray-color{color:#eee}:root .has-very-dark-gray-color{color:#313131}:root .has-vivid-green-cyan-to-vivid-cyan-blue-gradient-background{background:linear-gradient(135deg,#00d084,#0693e3)}:root .has-purple-crush-gradient-background{background:linear-gradient(135deg,#34e2e4,#4721fb 50%,#ab1dfe)}:root .has-hazy-dawn-gradient-background{background:linear-gradient(135deg,#faaca8,#dad0ec)}:root .has-subdued-olive-gradient-background{background:linear-gradient(135deg,#fafae1,#67a671)}:root .has-atomic-cream-gradient-background{background:linear-gradient(135deg,#fdd79a,#004a59)}:root .has-nightshade-gradient-background{background:linear-gradient(135deg,#330968,#31cdcf)}:root .has-midnight-gradient-background{background:linear-gradient(135deg,#020381,#2874fc)}.has-regular-font-size{font-size:1em}.has-larger-font-size{font-size:2.625em}.has-normal-font-size{font-size:var(--wp--preset--font-size--normal)}.has-huge-font-size{font-size:var(--wp--preset--font-size--huge)}.has-text-align-center{text-align:center}.has-text-align-left{text-align:left}.has-text-align-right{text-align:right}#end-resizable-editor-section{display:none}.aligncenter{clear:both}.items-justified-left{justify-content:flex-start}.items-justified-center{justify-content:center}.items-justified-right{justify-content:flex-end}.items-justified-space-between{justify-content:space-between}.screen-reader-text{clip:rect(1px,1px,1px,1px);word-wrap:normal!important;border:0;-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.screen-reader-text:focus{clip:auto!important;background-color:#ddd;-webkit-clip-path:none;clip-path:none;color:#444;display:block;font-size:1em;height:auto;left:5px;line-height:normal;padding:15px 23px 14px;text-decoration:none;top:5px;width:auto;z-index:100000}html :where(.has-border-color){border-style:solid}html :where([style*=border-top-color]){border-top-style:solid}html :where([style*=border-right-color]){border-right-style:solid}html :where([style*=border-bottom-color]){border-bottom-style:solid}html :where([style*=border-left-color]){border-left-style:solid}html :where([style*=border-width]){border-style:solid}html :where([style*=border-top-width]){border-top-style:solid}html :where([style*=border-right-width]){border-right-style:solid}html :where([style*=border-bottom-width]){border-bottom-style:solid}html :where([style*=border-left-width]){border-left-style:solid}html :where(img[class*=wp-image-]){height:auto;max-width:100%}:where(figure){margin:0 0 1em}html :where(.is-position-sticky){--wp-admin--admin-bar--position-offset:var(--wp-admin--admin-bar--height,0px)}@media screen and (max-width:600px){html :where(.is-position-sticky){--wp-admin--admin-bar--position-offset:0px}}
</style>
<link rel='stylesheet' id='wp-components-css' href='https://sysdig.com/wp-includes/css/dist/components/style.min.css?ver=6.4.3' type='text/css' media='all' />
<link rel='stylesheet' id='sysdig-block-editor-css' href='https://sysdig.com/wp-content/themes/sysdig/public/styles/blocks/block-editor.css?ver=1708542915' type='text/css' media='all' />
<link rel='stylesheet' id='wp-block-paragraph-css' href='https://sysdig.com/wp-includes/blocks/paragraph/style.min.css?ver=6.4.3' type='text/css' media='all' />
<link rel='stylesheet' id='sysdig-core-paragraph-styles-css' href='https://sysdig.com/wp-content/themes/sysdig/public/styles/blocks/core/paragraph.css?ver=6.4.3' type='text/css' media='all' />
<link rel='stylesheet' id='wp-block-heading-css' href='https://sysdig.com/wp-includes/blocks/heading/style.min.css?ver=6.4.3' type='text/css' media='all' />
<link rel='stylesheet' id='sysdig-core-heading-styles-css' href='https://sysdig.com/wp-content/themes/sysdig/public/styles/blocks/core/heading.css?ver=6.4.3' type='text/css' media='all' />
<!-- Begin output from print_late_styles() -->
<style id='wp-block-image-inline-css' type='text/css'>
.wp-block-image img{box-sizing:border-box;height:auto;max-width:100%;vertical-align:bottom}.wp-block-image[style*=border-radius] img,.wp-block-image[style*=border-radius]>a{border-radius:inherit}.wp-block-image.has-custom-border img{box-sizing:border-box}.wp-block-image.aligncenter{text-align:center}.wp-block-image.alignfull img,.wp-block-image.alignwide img{height:auto;width:100%}.wp-block-image .aligncenter,.wp-block-image .alignleft,.wp-block-image .alignright,.wp-block-image.aligncenter,.wp-block-image.alignleft,.wp-block-image.alignright{display:table}.wp-block-image .aligncenter>figcaption,.wp-block-image .alignleft>figcaption,.wp-block-image .alignright>figcaption,.wp-block-image.aligncenter>figcaption,.wp-block-image.alignleft>figcaption,.wp-block-image.alignright>figcaption{caption-side:bottom;display:table-caption}.wp-block-image .alignleft{float:left;margin:.5em 1em .5em 0}.wp-block-image .alignright{float:right;margin:.5em 0 .5em 1em}.wp-block-image .aligncenter{margin-left:auto;margin-right:auto}.wp-block-image figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-image .is-style-rounded img,.wp-block-image.is-style-circle-mask img,.wp-block-image.is-style-rounded img{border-radius:9999px}@supports ((-webkit-mask-image:none) or (mask-image:none)) or (-webkit-mask-image:none){.wp-block-image.is-style-circle-mask img{border-radius:0;-webkit-mask-image:url('data:image/svg+xml;utf8,<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>');mask-image:url('data:image/svg+xml;utf8,<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>');mask-mode:alpha;-webkit-mask-position:center;mask-position:center;-webkit-mask-repeat:no-repeat;mask-repeat:no-repeat;-webkit-mask-size:contain;mask-size:contain}}.wp-block-image :where(.has-border-color){border-style:solid}.wp-block-image :where([style*=border-top-color]){border-top-style:solid}.wp-block-image :where([style*=border-right-color]){border-right-style:solid}.wp-block-image :where([style*=border-bottom-color]){border-bottom-style:solid}.wp-block-image :where([style*=border-left-color]){border-left-style:solid}.wp-block-image :where([style*=border-width]){border-style:solid}.wp-block-image :where([style*=border-top-width]){border-top-style:solid}.wp-block-image :where([style*=border-right-width]){border-right-style:solid}.wp-block-image :where([style*=border-bottom-width]){border-bottom-style:solid}.wp-block-image :where([style*=border-left-width]){border-left-style:solid}.wp-block-image figure{margin:0}.wp-lightbox-container{display:flex;flex-direction:column;position:relative}.wp-lightbox-container img{cursor:zoom-in}.wp-lightbox-container img:hover+button{opacity:1}.wp-lightbox-container button{align-items:center;-webkit-backdrop-filter:blur(16px) saturate(180%);backdrop-filter:blur(16px) saturate(180%);background-color:rgba(90,90,90,.25);border:none;border-radius:4px;cursor:zoom-in;display:flex;height:20px;justify-content:center;opacity:0;padding:0;position:absolute;right:16px;text-align:center;top:16px;transition:opacity .2s ease;width:20px;z-index:100}.wp-lightbox-container button:focus-visible{outline:3px auto rgba(90,90,90,.25);outline:3px auto -webkit-focus-ring-color;outline-offset:3px}.wp-lightbox-container button:hover{cursor:pointer;opacity:1}.wp-lightbox-container button:focus{opacity:1}.wp-lightbox-container button:focus,.wp-lightbox-container button:hover,.wp-lightbox-container button:not(:hover):not(:active):not(.has-background){background-color:rgba(90,90,90,.25);border:none}.wp-lightbox-overlay{box-sizing:border-box;cursor:zoom-out;height:100vh;left:0;overflow:hidden;position:fixed;top:0;visibility:hidden;width:100vw;z-index:100000}.wp-lightbox-overlay .close-button{align-items:center;cursor:pointer;display:flex;justify-content:center;min-height:40px;min-width:40px;padding:0;position:absolute;right:calc(env(safe-area-inset-right) + 16px);top:calc(env(safe-area-inset-top) + 16px);z-index:5000000}.wp-lightbox-overlay .close-button:focus,.wp-lightbox-overlay .close-button:hover,.wp-lightbox-overlay .close-button:not(:hover):not(:active):not(.has-background){background:none;border:none}.wp-lightbox-overlay .lightbox-image-container{height:var(--wp--lightbox-container-height);left:50%;overflow:hidden;position:absolute;top:50%;transform:translate(-50%,-50%);transform-origin:top left;width:var(--wp--lightbox-container-width);z-index:9999999999}.wp-lightbox-overlay .wp-block-image{align-items:center;box-sizing:border-box;display:flex;height:100%;justify-content:center;margin:0;position:relative;transform-origin:0 0;width:100%;z-index:3000000}.wp-lightbox-overlay .wp-block-image img{height:var(--wp--lightbox-image-height);min-height:var(--wp--lightbox-image-height);min-width:var(--wp--lightbox-image-width);width:var(--wp--lightbox-image-width)}.wp-lightbox-overlay .wp-block-image figcaption{display:none}.wp-lightbox-overlay button{background:none;border:none}.wp-lightbox-overlay .scrim{background-color:#fff;height:100%;opacity:.9;position:absolute;width:100%;z-index:2000000}.wp-lightbox-overlay.active{animation:turn-on-visibility .25s both;visibility:visible}.wp-lightbox-overlay.active img{animation:turn-on-visibility .35s both}.wp-lightbox-overlay.hideanimationenabled:not(.active){animation:turn-off-visibility .35s both}.wp-lightbox-overlay.hideanimationenabled:not(.active) img{animation:turn-off-visibility .25s both}@media (prefers-reduced-motion:no-preference){.wp-lightbox-overlay.zoom.active{animation:none;opacity:1;visibility:visible}.wp-lightbox-overlay.zoom.active .lightbox-image-container{animation:lightbox-zoom-in .4s}.wp-lightbox-overlay.zoom.active .lightbox-image-container img{animation:none}.wp-lightbox-overlay.zoom.active .scrim{animation:turn-on-visibility .4s forwards}.wp-lightbox-overlay.zoom.hideanimationenabled:not(.active){animation:none}.wp-lightbox-overlay.zoom.hideanimationenabled:not(.active) .lightbox-image-container{animation:lightbox-zoom-out .4s}.wp-lightbox-overlay.zoom.hideanimationenabled:not(.active) .lightbox-image-container img{animation:none}.wp-lightbox-overlay.zoom.hideanimationenabled:not(.active) .scrim{animation:turn-off-visibility .4s forwards}}@keyframes turn-on-visibility{0%{opacity:0}to{opacity:1}}@keyframes turn-off-visibility{0%{opacity:1;visibility:visible}99%{opacity:0;visibility:visible}to{opacity:0;visibility:hidden}}@keyframes lightbox-zoom-in{0%{transform:translate(calc(-50vw + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) scale(var(--wp--lightbox-scale))}to{transform:translate(-50%,-50%) scale(1)}}@keyframes lightbox-zoom-out{0%{transform:translate(-50%,-50%) scale(1);visibility:visible}99%{visibility:visible}to{transform:translate(calc(-50vw + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) scale(var(--wp--lightbox-scale));visibility:hidden}}
</style>
<style id='wp-block-image-theme-inline-css' type='text/css'>
.wp-block-image figcaption{color:#555;font-size:13px;text-align:center}.is-dark-theme .wp-block-image figcaption{color:hsla(0,0%,100%,.65)}.wp-block-image{margin:0 0 1em}
</style>
<style id='wp-block-code-inline-css' type='text/css'>
.wp-block-code{box-sizing:border-box}.wp-block-code code{display:block;font-family:inherit;overflow-wrap:break-word;white-space:pre-wrap}
.wp-block-code{background-color: var(--wp--preset--color--gray-70);border-radius: 11px;color: var(--wp--preset--color--white);font-family: Consolas, Courier, Monaco, monospace;font-weight: 300;line-height: 1.4;padding: 2rem;}
</style>
<style id='global-styles-inline-css' type='text/css'>
body{--wp--preset--color--black: #171717;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--color--primary: #BDF78B;--wp--preset--color--gray-10: #EAEBED;--wp--preset--color--gray-20: #BBBDBF;--wp--preset--color--gray-30: #8A8C8E;--wp--preset--color--gray-40: #626466;--wp--preset--color--gray-50: #535557;--wp--preset--color--gray-60: #3E4042;--wp--preset--color--gray-70: #2B2D30;--wp--preset--color--gray-80: #1E1E22;--wp--preset--color--gray-90: #121217;--wp--preset--color--yellow: #ffe24d;--wp--preset--color--light-green: #99CC7E;--wp--preset--color--light-blue: #93E0F1;--wp--preset--color--medium-blue: #65CADA;--wp--preset--color--green: #22FDC8;--wp--preset--color--navy: #023A83;--wp--preset--color--blue: #023A83;--wp--preset--color--dark-blue: #0e1471;--wp--preset--color--error: #FF9C85;--wp--preset--color--cucumber: #77B755;--wp--preset--color--purple: #3E4FEC;--wp--preset--color--grey: #F9F9F9;--wp--preset--color--light-grey: #828282;--wp--preset--color--body-black: #3D4750;--wp--preset--color--transparent: transparent;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--gradient--black-to-blue: linear-gradient(249.13deg,#0e1270 3.45%,#000);--wp--preset--font-size--small: clamp(0.6875rem, 4vw - 1rem, 0.8125rem);--wp--preset--font-size--medium: clamp(14px, 0.875rem + ((1vw - 3.2px) * 0.682), 20px);--wp--preset--font-size--large: clamp(0.9375rem, 1vw + 0.5rem, 1.125rem);;--wp--preset--font-size--x-large: clamp(1.25rem, 1.25rem + ((1vw - 0.48rem) * 0.962), 1.5rem);--wp--preset--font-size--x-small: clamp(.625rem, 0.75rem + ((1vw - 0.48rem) * 0.192), 0.75rem);--wp--preset--font-size--base: clamp(.9375rem, 1rem + ((1vw - 0.48rem) * 0.327), .9375rem);--wp--preset--font-size--2-x-large: clamp(1.5rem, 1.5rem + ((1vw - 0.48rem) * 1.538), 1.875rem);--wp--preset--font-size--3-x-large: clamp(1.875rem, 1.875rem + ((1vw - 0.48rem) * 2.212), 2.25rem);--wp--preset--font-size--4-x-large: clamp(2.25rem, 2.25rem + ((1vw - 0.48rem) * 3.462), 3rem);--wp--preset--font-size--5-x-large: clamp(3rem, 3rem + ((1vw - 0.48rem) * 4), 3.75rem);--wp--preset--font-size--6-x-large: clamp(3.75rem, 3.75rem + ((1vw - 0.48rem) * 4.25), 4.5rem);--wp--preset--font-size--7-x-large: clamp(4.5rem, 4.5rem + ((1vw - 0.48rem) * 5), 6rem);--wp--preset--font-size--h-1: clamp(2.25rem, 3vw + 1rem, 3.125rem);--wp--preset--font-size--h-2: clamp(1.75rem, 5vw - 1rem, 2.813rem);--wp--preset--font-size--h-3: clamp(1.625rem, 5vw - 1rem, 2.188rem);--wp--preset--font-size--h-4: clamp(1.5rem, 1vw + 1rem, 1.75rem);--wp--preset--font-size--h-5: 1.375rem;--wp--preset--font-size--h-6: 1.125rem;--wp--preset--font-family--poppins: 'Poppins', Verdana, sans-serif;--wp--preset--font-family--mulish: 'Mulish', arial, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, 'Noto Sans', 'Liberation Sans', sans-serif, 'Apple Color Emoji', 'Segoe UI Emoji', 'Segoe UI Symbol', 'Noto Color Emoji';--wp--preset--font-family--share-tech-mono: 'Share Tech Mono', monospace;--wp--preset--spacing--20: 0.5rem;--wp--preset--spacing--30: 0.75rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.25rem;--wp--preset--spacing--60: 1.5rem;--wp--preset--spacing--70: 1.75rem;--wp--preset--spacing--80: 2rem;--wp--preset--spacing--px: 1px;--wp--preset--spacing--10: 0.25rem;--wp--preset--spacing--90: clamp(2rem, calc(2rem + ((1vw - 0.4rem) * 1.0417)), 2.25rem);--wp--preset--spacing--100: clamp(2rem, calc(2rem + ((1vw - 0.4rem) * 2.0833)), 2.5rem);--wp--preset--spacing--120: clamp(2rem, calc(2rem + ((1vw - 0.4rem) * 4.1667)), 3rem);--wp--preset--spacing--160: clamp(2rem, calc(2rem + ((1vw - 0.4rem) * 8.3333)), 4rem);--wp--preset--spacing--200: clamp(2rem, calc(2rem + ((1vw - 0.4rem) * 8.3333)), 5rem);--wp--preset--spacing--240: clamp(4rem, calc(4rem + ((1vw - 0.4rem) * 8.3333)), 6rem);--wp--preset--spacing--320: clamp(4rem, calc(4rem + ((1vw - 0.4rem) * 16.6667)), 8rem);--wp--preset--shadow--natural: 6px 6px 9px rgba(0, 0, 0, 0.2);--wp--preset--shadow--deep: 12px 12px 50px rgba(0, 0, 0, 0.4);--wp--preset--shadow--sharp: 6px 6px 0px rgba(0, 0, 0, 0.2);--wp--preset--shadow--outlined: 6px 6px 0px -3px rgba(255, 255, 255, 1), 6px 6px rgba(0, 0, 0, 1);--wp--preset--shadow--crisp: 6px 6px 0px rgba(0, 0, 0, 1);--wp--preset--shadow--banner: -5px 10px 15px rgba(0, 0, 0, 0.11);--wp--custom--radius--medium: 0.625rem;--wp--custom--radius--large: 1rem;--wp--custom--color--concrete: #f2f2f2;--wp--custom--color--error: #ea5255;--wp--custom--font-size--homepage-h-1: 3.75rem;}body { margin: 0;--wp--style--global--content-size: 800px;--wp--style--global--wide-size: 1200px; }.wp-site-blocks { padding-top: var(--wp--style--root--padding-top); padding-bottom: var(--wp--style--root--padding-bottom); }.has-global-padding { padding-right: var(--wp--style--root--padding-right); padding-left: var(--wp--style--root--padding-left); }.has-global-padding :where(.has-global-padding:not(.wp-block-block)) { padding-right: 0; padding-left: 0; }.has-global-padding > .alignfull { margin-right: calc(var(--wp--style--root--padding-right) * -1); margin-left: calc(var(--wp--style--root--padding-left) * -1); }.has-global-padding :where(.has-global-padding:not(.wp-block-block)) > .alignfull { margin-right: 0; margin-left: 0; }.has-global-padding > .alignfull:where(:not(.has-global-padding):not(.is-layout-flex):not(.is-layout-grid)) > :where([class*="wp-block-"]:not(.alignfull):not([class*="__"]),p,h1,h2,h3,h4,h5,h6,ul,ol) { padding-right: var(--wp--style--root--padding-right); padding-left: var(--wp--style--root--padding-left); }.has-global-padding :where(.has-global-padding) > .alignfull:where(:not(.has-global-padding)) > :where([class*="wp-block-"]:not(.alignfull):not([class*="__"]),p,h1,h2,h3,h4,h5,h6,ul,ol) { padding-right: 0; padding-left: 0; }.wp-site-blocks > .alignleft { float: left; margin-right: 2em; }.wp-site-blocks > .alignright { float: right; margin-left: 2em; }.wp-site-blocks > .aligncenter { justify-content: center; margin-left: auto; margin-right: auto; }:where(.wp-site-blocks) > * { margin-block-start: 1.5rem; margin-block-end: 0; }:where(.wp-site-blocks) > :first-child:first-child { margin-block-start: 0; }:where(.wp-site-blocks) > :last-child:last-child { margin-block-end: 0; }body { --wp--style--block-gap: 1.5rem; }:where(body .is-layout-flow)  > :first-child:first-child{margin-block-start: 0;}:where(body .is-layout-flow)  > :last-child:last-child{margin-block-end: 0;}:where(body .is-layout-flow)  > *{margin-block-start: 1.5rem;margin-block-end: 0;}:where(body .is-layout-constrained)  > :first-child:first-child{margin-block-start: 0;}:where(body .is-layout-constrained)  > :last-child:last-child{margin-block-end: 0;}:where(body .is-layout-constrained)  > *{margin-block-start: 1.5rem;margin-block-end: 0;}:where(body .is-layout-flex) {gap: 1.5rem;}:where(body .is-layout-grid) {gap: 1.5rem;}body .is-layout-flow > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-flow > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-flow > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size);}body .is-layout-flex{display: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > *{margin: 0;}body .is-layout-grid{display: grid;}body .is-layout-grid > *{margin: 0;}body{background-color: var(--wp-preset--color--white);color: var(--wp--preset--color--gray-80);font-family: var(--wp--preset--font-family--mulish);font-size: clamp(.9375rem, 1rem + ((1vw - 0.48rem) * 0.327), .9375rem);line-height: 1.45;--wp--style--root--padding-top: 0px;--wp--style--root--padding-right: var(--wp--style--block-gap);--wp--style--root--padding-bottom: 0px;--wp--style--root--padding-left: var(--wp--style--block-gap);}a:where(:not(.wp-element-button)){text-decoration: underline;}h1, h2, h3, h4, h5, h6{color: var(--wp--preset--color--gray-80);font-family: var(--wp--preset--font-family--poppins);font-weight: 700;}h1{font-size: clamp(2.25rem, 3vw + 1rem, 3.125rem);line-height: 1.2;padding-bottom: 1.5rem;}h2{font-size: clamp(1.75rem, 5vw - 1rem, 2.813rem);line-height: 1.2;padding-bottom: 1.5rem;}h3{font-size: clamp(1.625rem, 5vw - 1rem, 2.188rem);line-height: 1.3;padding-bottom: 0.938rem;}h4{font-size: clamp(1.5rem, 1vw + 1rem, 1.75rem);line-height: 1.3;}h5{font-size: clamp(1.375rem, 1vw + 1.125rem, 1.375rem);line-height: 1.3;}h6{font-size: clamp(1.125rem, 1vw + 1.125rem, 1.125rem);line-height: 1.3;}.wp-element-button, .wp-block-button__link{background-color: #32373c;border-width: 0;color: #fff;font-family: inherit;font-size: inherit;line-height: inherit;padding: calc(0.667em + 2px) calc(1.333em + 2px);text-decoration: none;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-primary-color{color: var(--wp--preset--color--primary) !important;}.has-gray-10-color{color: var(--wp--preset--color--gray-10) !important;}.has-gray-20-color{color: var(--wp--preset--color--gray-20) !important;}.has-gray-30-color{color: var(--wp--preset--color--gray-30) !important;}.has-gray-40-color{color: var(--wp--preset--color--gray-40) !important;}.has-gray-50-color{color: var(--wp--preset--color--gray-50) !important;}.has-gray-60-color{color: var(--wp--preset--color--gray-60) !important;}.has-gray-70-color{color: var(--wp--preset--color--gray-70) !important;}.has-gray-80-color{color: var(--wp--preset--color--gray-80) !important;}.has-gray-90-color{color: var(--wp--preset--color--gray-90) !important;}.has-yellow-color{color: var(--wp--preset--color--yellow) !important;}.has-light-green-color{color: var(--wp--preset--color--light-green) !important;}.has-light-blue-color{color: var(--wp--preset--color--light-blue) !important;}.has-medium-blue-color{color: var(--wp--preset--color--medium-blue) !important;}.has-green-color{color: var(--wp--preset--color--green) !important;}.has-navy-color{color: var(--wp--preset--color--navy) !important;}.has-blue-color{color: var(--wp--preset--color--blue) !important;}.has-dark-blue-color{color: var(--wp--preset--color--dark-blue) !important;}.has-error-color{color: var(--wp--preset--color--error) !important;}.has-cucumber-color{color: var(--wp--preset--color--cucumber) !important;}.has-purple-color{color: var(--wp--preset--color--purple) !important;}.has-grey-color{color: var(--wp--preset--color--grey) !important;}.has-light-grey-color{color: var(--wp--preset--color--light-grey) !important;}.has-body-black-color{color: var(--wp--preset--color--body-black) !important;}.has-transparent-color{color: var(--wp--preset--color--transparent) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-primary-background-color{background-color: var(--wp--preset--color--primary) !important;}.has-gray-10-background-color{background-color: var(--wp--preset--color--gray-10) !important;}.has-gray-20-background-color{background-color: var(--wp--preset--color--gray-20) !important;}.has-gray-30-background-color{background-color: var(--wp--preset--color--gray-30) !important;}.has-gray-40-background-color{background-color: var(--wp--preset--color--gray-40) !important;}.has-gray-50-background-color{background-color: var(--wp--preset--color--gray-50) !important;}.has-gray-60-background-color{background-color: var(--wp--preset--color--gray-60) !important;}.has-gray-70-background-color{background-color: var(--wp--preset--color--gray-70) !important;}.has-gray-80-background-color{background-color: var(--wp--preset--color--gray-80) !important;}.has-gray-90-background-color{background-color: var(--wp--preset--color--gray-90) !important;}.has-yellow-background-color{background-color: var(--wp--preset--color--yellow) !important;}.has-light-green-background-color{background-color: var(--wp--preset--color--light-green) !important;}.has-light-blue-background-color{background-color: var(--wp--preset--color--light-blue) !important;}.has-medium-blue-background-color{background-color: var(--wp--preset--color--medium-blue) !important;}.has-green-background-color{background-color: var(--wp--preset--color--green) !important;}.has-navy-background-color{background-color: var(--wp--preset--color--navy) !important;}.has-blue-background-color{background-color: var(--wp--preset--color--blue) !important;}.has-dark-blue-background-color{background-color: var(--wp--preset--color--dark-blue) !important;}.has-error-background-color{background-color: var(--wp--preset--color--error) !important;}.has-cucumber-background-color{background-color: var(--wp--preset--color--cucumber) !important;}.has-purple-background-color{background-color: var(--wp--preset--color--purple) !important;}.has-grey-background-color{background-color: var(--wp--preset--color--grey) !important;}.has-light-grey-background-color{background-color: var(--wp--preset--color--light-grey) !important;}.has-body-black-background-color{background-color: var(--wp--preset--color--body-black) !important;}.has-transparent-background-color{background-color: var(--wp--preset--color--transparent) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-primary-border-color{border-color: var(--wp--preset--color--primary) !important;}.has-gray-10-border-color{border-color: var(--wp--preset--color--gray-10) !important;}.has-gray-20-border-color{border-color: var(--wp--preset--color--gray-20) !important;}.has-gray-30-border-color{border-color: var(--wp--preset--color--gray-30) !important;}.has-gray-40-border-color{border-color: var(--wp--preset--color--gray-40) !important;}.has-gray-50-border-color{border-color: var(--wp--preset--color--gray-50) !important;}.has-gray-60-border-color{border-color: var(--wp--preset--color--gray-60) !important;}.has-gray-70-border-color{border-color: var(--wp--preset--color--gray-70) !important;}.has-gray-80-border-color{border-color: var(--wp--preset--color--gray-80) !important;}.has-gray-90-border-color{border-color: var(--wp--preset--color--gray-90) !important;}.has-yellow-border-color{border-color: var(--wp--preset--color--yellow) !important;}.has-light-green-border-color{border-color: var(--wp--preset--color--light-green) !important;}.has-light-blue-border-color{border-color: var(--wp--preset--color--light-blue) !important;}.has-medium-blue-border-color{border-color: var(--wp--preset--color--medium-blue) !important;}.has-green-border-color{border-color: var(--wp--preset--color--green) !important;}.has-navy-border-color{border-color: var(--wp--preset--color--navy) !important;}.has-blue-border-color{border-color: var(--wp--preset--color--blue) !important;}.has-dark-blue-border-color{border-color: var(--wp--preset--color--dark-blue) !important;}.has-error-border-color{border-color: var(--wp--preset--color--error) !important;}.has-cucumber-border-color{border-color: var(--wp--preset--color--cucumber) !important;}.has-purple-border-color{border-color: var(--wp--preset--color--purple) !important;}.has-grey-border-color{border-color: var(--wp--preset--color--grey) !important;}.has-light-grey-border-color{border-color: var(--wp--preset--color--light-grey) !important;}.has-body-black-border-color{border-color: var(--wp--preset--color--body-black) !important;}.has-transparent-border-color{border-color: var(--wp--preset--color--transparent) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-black-to-blue-gradient-background{background: var(--wp--preset--gradient--black-to-blue) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;}.has-x-small-font-size{font-size: var(--wp--preset--font-size--x-small) !important;}.has-base-font-size{font-size: var(--wp--preset--font-size--base) !important;}.has-2-x-large-font-size{font-size: var(--wp--preset--font-size--2-x-large) !important;}.has-3-x-large-font-size{font-size: var(--wp--preset--font-size--3-x-large) !important;}.has-4-x-large-font-size{font-size: var(--wp--preset--font-size--4-x-large) !important;}.has-5-x-large-font-size{font-size: var(--wp--preset--font-size--5-x-large) !important;}.has-6-x-large-font-size{font-size: var(--wp--preset--font-size--6-x-large) !important;}.has-7-x-large-font-size{font-size: var(--wp--preset--font-size--7-x-large) !important;}.has-h-1-font-size{font-size: var(--wp--preset--font-size--h-1) !important;}.has-h-2-font-size{font-size: var(--wp--preset--font-size--h-2) !important;}.has-h-3-font-size{font-size: var(--wp--preset--font-size--h-3) !important;}.has-h-4-font-size{font-size: var(--wp--preset--font-size--h-4) !important;}.has-h-5-font-size{font-size: var(--wp--preset--font-size--h-5) !important;}.has-h-6-font-size{font-size: var(--wp--preset--font-size--h-6) !important;}.has-poppins-font-family{font-family: var(--wp--preset--font-family--poppins) !important;}.has-mulish-font-family{font-family: var(--wp--preset--font-family--mulish) !important;}.has-share-tech-mono-font-family{font-family: var(--wp--preset--font-family--share-tech-mono) !important;}
</style>
<!-- End output from print_late_styles() -->
<link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://sysdig.com/xmlrpc.php?rsd" />
<link rel='shortlink' href='https://sysdig.com/?p=84542' />
<link rel="alternate" type="application/json+oembed" href="https://sysdig.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsysdig.com%2Fblog%2Fssh-snake%2F" />
<link rel="alternate" type="text/xml+oembed" href="https://sysdig.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsysdig.com%2Fblog%2Fssh-snake%2F&#038;format=xml" />
<!-- Stream WordPress user activity plugin v4.0.0 -->
<meta name="author" content="Miguel Hernández" /><meta itemprop="datePublished" content="2024-02-20" /><style id='wp-fonts-local' type='text/css'>
@font-face{font-family:Poppins;font-style:normal;font-weight:400;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/poppins/poppins-v20-latin-regular.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/poppins/poppins-v20-latin-regular.ttf') format('truetype');font-stretch:normal;}
@font-face{font-family:Poppins;font-style:normal;font-weight:600;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/poppins/poppins-v20-latin-600.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/poppins/poppins-v20-latin-600.ttf') format('truetype');font-stretch:normal;}
@font-face{font-family:Poppins;font-style:normal;font-weight:700;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/poppins/poppins-v20-latin-700.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/poppins/poppins-v20-latin-700.ttf') format('truetype');font-stretch:normal;}
@font-face{font-family:Mulish;font-style:normal;font-weight:400;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-regular.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-regular.ttf') format('truetype');font-stretch:normal;}
@font-face{font-family:Mulish;font-style:italic;font-weight:400;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-italic.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-italic.ttf') format('truetype');font-stretch:normal;}
@font-face{font-family:Mulish;font-style:normal;font-weight:700;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-700.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-700.ttf') format('truetype');font-stretch:normal;}
@font-face{font-family:Mulish;font-style:italic;font-weight:700;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-700italic.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/mulish/mulish-v12-latin-700italic.ttf') format('truetype');font-stretch:normal;}
@font-face{font-family:"Share Tech Mono";font-style:normal;font-weight:400;font-display:fallback;src:url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/share-tech-mono/share-tech-mono-v15-latin-regular.woff2') format('woff2'), url('https://sysdig.com/wp-content/themes/sysdig/assets/fonts/share-tech-mono/share-tech-mono-v15-latin-regular.ttf') format('truetype');font-stretch:normal;}
</style>
<link rel="icon" href="https://sysdig.com/wp-content/uploads/favicon-150x150.png" sizes="32x32" />
<link rel="icon" href="https://sysdig.com/wp-content/uploads/favicon-350x350.png" sizes="192x192" />
<link rel="apple-touch-icon" href="https://sysdig.com/wp-content/uploads/favicon-350x350.png" />
<meta name="msapplication-TileImage" content="https://sysdig.com/wp-content/uploads/favicon-350x350.png" />
		<style type="text/css" id="wp-custom-css">
			h1 .u-text-underline.u-underline-teal,
h2 .u-text-underline.u-underline-teal{
	text-decoration: none;
}

@media (min-width:1150px) {
  .lg\:px-20 {
    padding-left: 3rem!important;
    padding-right: 3rem!important;
    min-width: 350px;
    max-width: 350px;
	  width: 350px;
  }
}
		</style>
		</head>

<body class="post-template-default single single-post postid-84542 single-format-standard wp-custom-logo wp-embed-responsive announcement-bar">
		
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-KHGG4KL" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
	
<div id="page" class="site">

	<div id="main-navigation" class="c-site-nav-wrap fixed-top bg-gray-80">
	
	
<style>
	.c-announcement-bar {
		min-height: 60px;
	}

	@media (min-width: 576px) {
		.c-announcement-bar {
			min-height: 22px;
		}
	}
</style>

<div id="announcement-bar" class="b-v4-block-container-banner bg-primary" data-banner-container>
    <div class="o-container container">
        <div class="c-announcement-bar flex flex-row flex-wrap items-center justify-center position-relative mr-4 gap-4">

			
					<a class="js-announcement no-underline text-gray-80 link-parent absolute flex gap-4 items-center transition-opacity duration-500 ease-in "
					   href="https://sysdig.com/blog/sysdig-leader-outperformer-gigaom-radar-container-security/" target="http://_blank">
					    						<span class="">Sysdig Named Leader and Outperformer in GigaOm Radar for Container Security&nbsp;
						<span class="inline md:ml-6 border-gray-80 border-0 border-b-2 border-solid whitespace-no-wrap">Learn More<span></span></span></span>
					</a>
					
				
					<a class="js-announcement no-underline text-gray-80 link-parent absolute flex gap-4 items-center transition-opacity duration-500 ease-in hidden"
					   href="https://sysdig.com/2024-cloud-native-security-and-usage-report/" target="http://_blank">
					    						<span class="">Discover the top trends and insights in cloud-native usage and security&nbsp;
						<span class="inline md:ml-6 border-gray-80 border-0 border-b-2 border-solid whitespace-no-wrap">Learn More<span></span></span></span>
					</a>
					
				
					<a class="js-announcement no-underline text-gray-80 link-parent absolute flex gap-4 items-center transition-opacity duration-500 ease-in hidden"
					   href="https://sysdig.com/blog/kuppingercole-names-sysdig-product-innovation-leader-cnapp/" target="">
					    						<span class="">Sysdig named a Product and Innovation Leader for CNAPP&nbsp;
						<span class="inline md:ml-6 border-gray-80 border-0 border-b-2 border-solid whitespace-no-wrap">Learn More<span></span></span></span>
					</a>
					
				
            <div class="b-v4-block-container-banner-x" data-banner-x></div>
        </div>
    </div>
</div>

<script>
	// Rotate through announcements
	(() => {
		const announcements = document.getElementsByClassName('js-announcement'),
		      length = announcements.length,
			  intervalLength = 4000
		var count = 1
		// Only rotate if more than one
		if ( length > 1 ) setInterval(switchAnnouncements, intervalLength)

		function switchAnnouncements() {
			for (let i = 0; i < announcements.length; i++) {
				// If the next slide prepare to show
				if ( i === count ) {
					announcements[i].classList.remove('hidden')
					announcements[i].classList.add('opacity-0')
				// Otherwise prepare to hide
				} else {
					announcements[i].classList.add('opacity-0')
				}
			}
			// Delay to allow fade transition before setting to display: none
			setTimeout(() => {
			for (let i = 0; i < announcements.length; i++) {
				// If the next slide show
				if ( i === count ) {
					announcements[i].classList.remove('opacity-0')
				// Otherwise hide
				} else {
					announcements[i].classList.add('hidden')
					announcements[i].classList.remove('opacity-0')
				}
			}

			// If reached the end reset to first slide
			if (count === (length - 1 )) {
				count = 0
			// Otherwise move to the next slide
			} else {
				count++
			}

			}, '500')
		 }
	})();
</script>

<script>
	// Hide banner persitently if close button clicked, store setting in cookie
	(() => {
		const announcementBar = document.cookie.split("; ").find((row) => row.startsWith("announcement_closed="))?.split("=")[1];
		const announcementBarElement = document.getElementById('announcement-bar');
		if (announcementBar === 'true') {
			announcementBarElement.style.display = 'none';
			document.querySelector('#page').style = '--banner-height: 0px';
		} else {
			const site = document.querySelector('#page');
			site.style = `--banner-height: ${announcementBarElement.offsetHeight}px`;
		}
	})();
</script>


    <nav class="navbar navbar-expand-lg">
        <div class="container h-full">

            <a class="navbar-brand ml-5 mr-6 lg:ml-0 lg:mr-8" href="https://sysdig.com/" rel="home">
                <img src="https://sysdig.com/wp-content/uploads/sysdig-logo-new-white.svg" alt="Sysdig" width="180" height="65" class="mb-0 " loading="eager">            </a>

                            <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarNavDropdown" aria-controls="navbarNavDropdown" aria-expanded="false" aria-label="Toggle navigation">
                    <svg width="41" height="41" viewBox="0 0 41 41" fill="none" xmlns="http://www.w3.org/2000/svg">
                        <line class="line-1" x1="7.98535" y1="12.9167" x2="32.2108" y2="12.9167" stroke="#ffffff"
                              stroke-width="1.5" stroke-linecap="round"/>
                        <line class="line-2" x1="7.98535" y1="20.152" x2="32.2108" y2="20.152" stroke="#ffffff"
                              stroke-width="1.5" stroke-linecap="round"/>
                        <line class="line-3" x1="7.98535" y1="27.3873" x2="32.2108" y2="27.3873" stroke="#ffffff"
                              stroke-width="1.5" stroke-linecap="round"/>
                    </svg>
                </button>

                <div class="collapse navbar-collapse" id="navbarNavDropdown">
                    <ul id="menu-main-navigation" class="navbar-nav items-start lg:items-center mt-2 lg:mt-0"><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55197" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item dropdown"><a id="menu-item-dropdown-55197" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false">Products<span></span></a>
<ul class="dropdown-menu flex-col lg:flex-row flex-nowrap px-5 pt-2 pb-6 lg:px-7 lg:py-10" aria-labelledby="menu-item-dropdown-55197" role="menu">
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-nav-column-header d-inline-flex d-lg-none pb-4 w-auto text-white">Products</li>	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55209" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Security<span></span></span></div>
	<ul aria-labelledby="menu-item-55209" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55205" class="font-bold menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/products/platform/" id="menu-item-dropdown-55205"><div class="position-relative inline">Sysdig Secure<span class="gradient-border"></span></div><div class="nav-description pt-1">CNAPP Powered by Runtime Insights</div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55211" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Observability<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-55205" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55210" class="font-bold menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/products/monitor/" id="menu-item-dropdown-55210"><div class="position-relative inline">Sysdig Monitor<span class="gradient-border"></span></div><div class="nav-description pt-1">Kubernetes and Prometheus Monitoring</div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-59719" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3  border_left   no-header "><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Platform &#8211; 3rd Column Header &#8211; Hidden<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-55210" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-69706" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/blog/cnapp-runtime-insights-shift-left-shield-right/" id="menu-item-dropdown-69706"><div class="position-relative inline">Why CNAPP?<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74336" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/why-runtime-insights/" id="menu-item-dropdown-74336"><div class="position-relative inline">Runtime Insights<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-76681" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/generative-ai/" id="menu-item-dropdown-76681"><div class="position-relative inline">Sysdig Sage GenAI<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56809" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/integrations/" id="menu-item-dropdown-56809"><div class="position-relative inline">Integrations<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56747" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/pricing-secure/" id="menu-item-dropdown-56747"><div class="position-relative inline">Pricing<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55198" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item dropdown"><a id="menu-item-dropdown-55198" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false">Solutions<span></span></a>
<ul class="dropdown-menu flex-col lg:flex-row flex-nowrap px-5 pt-2 pb-6 lg:px-7 lg:py-10" aria-labelledby="menu-item-dropdown-55198" role="menu">
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-nav-column-header d-inline-flex d-lg-none pb-4 w-auto text-white">Solutions</li>	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55214" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Security<span></span></span></div>
	<ul aria-labelledby="menu-item-55214" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56780" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/cloud-threat-detection-and-response/" id="menu-item-dropdown-56780"><div class="position-relative inline">Cloud Detection &#038; Response<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56777" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/vulnerability-management/" id="menu-item-dropdown-56777"><div class="position-relative inline">Vulnerability Management<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56778" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/cspm/" id="menu-item-dropdown-56778"><div class="position-relative inline">Posture Management<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-62623" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/permissions-entitlement-management/" id="menu-item-dropdown-62623"><div class="position-relative inline">Permissions &#038; Entitlement<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74347" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/server-threat-detection/" id="menu-item-dropdown-74347"><div class="position-relative inline">Server Threat Detection<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55227" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Observability<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-74347" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56789" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/kubernetes-monitoring/" id="menu-item-dropdown-56789"><div class="position-relative inline">Kubernetes Monitoring<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56787" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/prometheus-monitoring/" id="menu-item-dropdown-56787"><div class="position-relative inline">Prometheus Monitoring<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56792" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/custom-metrics/" id="menu-item-dropdown-56792"><div class="position-relative inline">Custom Metrics<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56788" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/cloud-monitoring/" id="menu-item-dropdown-56788"><div class="position-relative inline">Cloud Monitoring<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56793" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/cost-optimization/" id="menu-item-dropdown-56793"><div class="position-relative inline">Cost Optimization<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-79241" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/cloud-native-observability-solutions/" id="menu-item-dropdown-79241"><div class="position-relative inline">View All<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55228" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Environments<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-79241" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57499" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/solutions/container-and-kubernetes-security/" id="menu-item-dropdown-57499"><div class="position-relative inline">Kubernetes &#038; Containers<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57552" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/ecosystem/serverless/" id="menu-item-dropdown-57552"><div class="position-relative inline">Serverless<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57450" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/ecosystem/aws/" id="menu-item-dropdown-57450"><div class="position-relative inline">Amazon Web Services<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57573" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/ecosystem/google-cloud/" id="menu-item-dropdown-57573"><div class="position-relative inline">Google Cloud<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57582" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/ecosystem/microsoft-azure/" id="menu-item-dropdown-57582"><div class="position-relative inline">Microsoft Azure<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57606" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/ecosystem/ibm/" id="menu-item-dropdown-57606"><div class="position-relative inline">IBM Cloud<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-58592" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/ecosystem/" id="menu-item-dropdown-58592"><div class="position-relative inline">View All<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55199" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item dropdown"><a id="menu-item-dropdown-55199" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false">Open Source<span></span></a>
<ul class="dropdown-menu flex-col lg:flex-row flex-nowrap px-5 pt-2 pb-6 lg:px-7 lg:py-10" aria-labelledby="menu-item-dropdown-55199" role="menu">
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-nav-column-header d-inline-flex d-lg-none pb-4 w-auto text-white">Open Source</li>	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55240" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3  no-header "><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Open Source &#8211; 1st Column Header &#8211; HIdden<span></span></span></div>
	<ul aria-labelledby="menu-item-55240" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-73810" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/opensource/" id="menu-item-dropdown-73810"><div class="position-relative inline">Sysdig and Open Source<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55242" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Projects<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-73810" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-56796" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/opensource/falco/" id="menu-item-dropdown-56796"><div class="position-relative inline">Falco<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57640" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/opensource/open-policy-agent/" id="menu-item-dropdown-57640"><div class="position-relative inline">Open Policy Agent<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57642" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/opensource/prometheus/" id="menu-item-dropdown-57642"><div class="position-relative inline">Prometheus<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55200" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item dropdown"><a id="menu-item-dropdown-55200" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false">Why Sysdig<span></span></a>
<ul class="dropdown-menu flex-col lg:flex-row flex-nowrap px-5 pt-2 pb-6 lg:px-7 lg:py-10" aria-labelledby="menu-item-dropdown-55200" role="menu">
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-nav-column-header d-inline-flex d-lg-none pb-4 w-auto text-white">Why Sysdig</li>	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74345" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Why Sysdig<span></span></span></div>
	<ul aria-labelledby="menu-item-74345" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74338" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/about/" id="menu-item-dropdown-74338"><div class="position-relative inline">About Us<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74337" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/customers/" id="menu-item-dropdown-74337"><div class="position-relative inline">Our Customers<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74339" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/threat-research/" id="menu-item-dropdown-74339"><div class="position-relative inline">Threat Research Team<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-81097" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="http://sysdig.com/555-cloud-detection-response-benchmark" id="menu-item-dropdown-81097"><div class="position-relative inline">5/5/5 CDR Benchmark<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-83788" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/2024-cloud-native-security-and-usage-report/" id="menu-item-dropdown-83788"><div class="position-relative inline">2024 Cloud-Native Security &#038; Usage Report<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74340" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Compare Sysdig<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-83788" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74341" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/vs/crowdstrike/" id="menu-item-dropdown-74341"><div class="position-relative inline">Crowdstrike<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74342" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/vs/lacework/" id="menu-item-dropdown-74342"><div class="position-relative inline">Lacework<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74343" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/vs/prismacloud/" id="menu-item-dropdown-74343"><div class="position-relative inline">Prisma Cloud<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-74344" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/vs/wiz/" id="menu-item-dropdown-74344"><div class="position-relative inline">Wiz<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-82208" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/vs/aqua/" id="menu-item-dropdown-82208"><div class="position-relative inline">Aqua<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55201" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item dropdown"><a id="menu-item-dropdown-55201" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false">Resources<span></span></a>
<ul class="dropdown-menu flex-col lg:flex-row flex-nowrap px-5 pt-2 pb-6 lg:px-7 lg:py-10" aria-labelledby="menu-item-dropdown-55201" role="menu">
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-nav-column-header d-inline-flex d-lg-none pb-4 w-auto text-white">Resources</li>	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55247" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3  no-header "><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Resources &#8211; 1st Column Header &#8211; Hidden<span></span></span></div>
	<ul aria-labelledby="menu-item-55247" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55248" class="font-bold menu-item menu-item-type-post_type menu-item-object-page nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/blog/" id="menu-item-dropdown-55248"><div class="position-relative inline">Blog<span class="gradient-border"></span></div><div class="nav-description pt-1">Cloud security thought leadership, industry insights, and Sysdig news</div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-78909" class="font-bold menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/threat-research/" id="menu-item-dropdown-78909"><div class="position-relative inline">Threat Research<span class="gradient-border"></span></div><div class="nav-description pt-1">Latest threat research and news</div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55250" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Education<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-78909" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55251" class="menu-item menu-item-type-post_type menu-item-object-page nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/content-library/" id="menu-item-dropdown-55251"><div class="position-relative inline">Content Library<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-63696" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/content-library/webinars/" id="menu-item-dropdown-63696"><div class="position-relative inline">Events &#038; Webinars<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57650" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://learn.sysdig.com/" id="menu-item-dropdown-57650" target="_blank"><div class="position-relative inline">Training Portal<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55253" class="menu-item menu-item-type-post_type menu-item-object-page nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/learn-cloud-native/" id="menu-item-dropdown-55253"><div class="position-relative inline">Learn Cloud Native<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55255" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Topics<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-55253" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57644" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/topic/kubernetes-container-security/" id="menu-item-dropdown-57644"><div class="position-relative inline">Container Security<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57643" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/topic/cloud-security/" id="menu-item-dropdown-57643"><div class="position-relative inline">Cloud Security<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57646" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/topic/monitoring/" id="menu-item-dropdown-57646"><div class="position-relative inline">Monitoring<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57645" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/topic/compliance/" id="menu-item-dropdown-57645"><div class="position-relative inline">Compliance<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55260" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Support<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-57645" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55261" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/support/" id="menu-item-dropdown-55261"><div class="position-relative inline">Support<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57653" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.force.com/support/s/web-to-case/" id="menu-item-dropdown-57653" target="_blank"><div class="position-relative inline">Request Support<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57651" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://kb.sysdig.com/" id="menu-item-dropdown-57651" target="_blank"><div class="position-relative inline">Knowledgebase<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57654" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="/company/sysdig-status/" id="menu-item-dropdown-57654"><div class="position-relative inline">Sysdig Status<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57652" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://docs.sysdig.com/" id="menu-item-dropdown-57652" target="_blank"><div class="position-relative inline">Documentation<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
</ul>
</li>
</ul>
                    <hr class="c-rule text-gray-30 border-2 mx-5 my-2 lg:hidden">

                    <ul id="menu-main-navigation-side" class="main-navigation-side navbar-nav items-start lg:items-center mb-6 lg:mb-0"><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55171" class="menu-item menu-item-type-custom menu-item-object-custom nav-item dropdown is_search ml-auto"><a id="menu-item-dropdown-55171" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false"><img src="https://sysdig.com/wp-content/themes/sysdig/assets/images/search-white.svg" /> <div class="sr-only ml-1">Search</div><span></span></a><ul class="dropdown-menu c-v4-dropdown-search flex-row flex-wrap items-start px-5 pt-2 pb-6 lg:p-12" aria-labelledby="menu-item-dropdown-49968" role="menu"">
        <li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li>
        <li class="c-v4-dropdown-search--wrapper mt-4 lg:mt-0 p-0">

<form role="search" method="get" class="c-search-form gap-4" action="https://sysdig.com/">
	<label class="c-search-form__label ">
		<span class="before"></span>
		<span class="screen-reader-text">Search for:</span>
		<input type="text" class="c-search-form__field" placeholder="Search" value="" name="s" />
		<span class="after"></span>
	</label>
	<button type="submit" class="c-search-form__button button bg-yellow" ><span>Search</span></button>
</form></li>
        <li class="c-v4-dropdown-search--results pt-8 px-0 flex-column">
          <div class="c-v4-dropdown-search--results-header u-text-xs pb-5">Best Match</div>
          <div class="c-v4-dropdown-search--results-body pb-5"></div><a class="text-link search-link text-primary ml-0" href="#" target="">View all search results<span></span></a>
        </li>
      </ul></li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55187" class="is-language-dropdown menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item dropdown"><a id="menu-item-dropdown-55187" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false"><img src="https://sysdig.com/wp-content/themes/sysdig/assets/images/globe-white.svg" /> <div class="sr-only ml-1">Languages</div><span></span></a>
<ul class="dropdown-menu flex-col lg:flex-row flex-nowrap px-5 pt-2 pb-6 lg:px-7 lg:py-10" aria-labelledby="menu-item-dropdown-55187" role="menu">
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-nav-column-header d-inline-flex d-lg-none pb-4 w-auto text-white">Language</li>	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55188" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3  no-header "><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Language Header &#8211; Hidden<span></span></span></div>
	<ul aria-labelledby="menu-item-55188" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55194" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://de.sysdig.com/" id="menu-item-dropdown-55194"><div class="position-relative inline">Deutsch<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55189" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-home nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.com/" id="menu-item-dropdown-55189"><div class="position-relative inline">English<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55192" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.es/" id="menu-item-dropdown-55192"><div class="position-relative inline">Español<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55190" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://fr.sysdig.com/" id="menu-item-dropdown-55190"><div class="position-relative inline">Français<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55191" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://it.sysdig.com/" id="menu-item-dropdown-55191"><div class="position-relative inline">Italiano<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55193" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://sysdig.jp/" id="menu-item-dropdown-55193"><div class="position-relative inline">日本<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55172" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item dropdown"><a id="menu-item-dropdown-55172" class="nav-link flex items-center dropdown-toggle" role="button" data-toggle="dropdown" aria-expanded="false">Log In<span></span></a>
<ul class="dropdown-menu flex-col lg:flex-row flex-nowrap px-5 pt-2 pb-6 lg:px-7 lg:py-10" aria-labelledby="menu-item-dropdown-55172" role="menu">
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-back d-flex d-lg-none pb-4"><a href="#" class="d-flex items-center">Back</a></li><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="mobile-nav-column-header d-inline-flex d-lg-none pb-4 w-auto text-white">Log In</li>	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55173" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Monitor<span></span></span></div>
	<ul aria-labelledby="menu-item-55173" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57656" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://app.sysdigcloud.com/#/login" id="menu-item-dropdown-57656" target="_blank"><div class="position-relative inline">US-East<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57657" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://us2.app.sysdig.com/#/login" id="menu-item-dropdown-57657"><div class="position-relative inline">US-West<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57658" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://eu1.app.sysdig.com/#/login" id="menu-item-dropdown-57658"><div class="position-relative inline">EU-Central<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57659" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://app.au1.sysdig.com/#/login" id="menu-item-dropdown-57659"><div class="position-relative inline">AWS-AP-Sydney<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57660" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://app.us4.sysdig.com/#/login" id="menu-item-dropdown-57660"><div class="position-relative inline">GCP-US-West<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55179" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3"><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Secure<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-57660" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57661" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://secure.sysdig.com/#/login" id="menu-item-dropdown-57661" target="_blank"><div class="position-relative inline">US-East<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57662" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://us2.app.sysdig.com/secure/#/login" id="menu-item-dropdown-57662" target="_blank"><div class="position-relative inline">US-West<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57663" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://eu1.app.sysdig.com/secure/#/login" id="menu-item-dropdown-57663" target="_blank"><div class="position-relative inline">EU-Central<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57664" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://app.au1.sysdig.com/secure/#/login" id="menu-item-dropdown-57664" target="_blank"><div class="position-relative inline">AWS-AP-Sydney<span class="gradient-border"></span></div></a></li>
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57665" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://app.us4.sysdig.com/secure/#/login" id="menu-item-dropdown-57665" target="_blank"><div class="position-relative inline">GCP-US-West<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55185" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item pb-0 lg:pb-3  no-header "><div class="nav-column-header flex items-center md:flex-wrap md:items-start pb-4" aria-expanded="false"><span>Log In &#8211; 3rd Column Header &#8211; HIdden<span></span></span></div>
	<ul aria-labelledby="menu-item-dropdown-57665" role="menu">
		<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-57666" class="menu-item menu-item-type-custom menu-item-object-custom nav-item pb-3"><a class="nav-link depth-2" href="https://cx.sysdig.com/" id="menu-item-dropdown-57666" target="_blank"><div class="position-relative inline">Support<span class="gradient-border"></span></div></a></li>
	</ul>
</li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" id="menu-item-55196" class="filter-get-demo menu-item menu-item-type-custom menu-item-object-custom nav-item"><a id="menu-item-dropdown-55196" class="nav-link flex items-center  button " href="/request-a-demo/" target="_blank">Get Demo<span></span></a></li>
</ul>                </div>

                    </div>
    </nav>
</div>

	<div id="content" class="site-content"><div id="primary" class="content-area"><main id="main" class="site-main">
			
	<div class="c-v4-m1-hero o-section pb-12 md:pb-4
    ">

		<div class="o-container container">
			<div class="row">

								<div class="c-v4-m1-hero--main col-12 col-md-7 col-lg-8 pb-8 md:pb-0">
					<nav aria-label="breadcrumb"><ol class="breadcrumb"><li class="breadcrumb-item"><a href="https://sysdig.com/blog/">Back to Blog</a></li></ol></nav>
					<h1>SSH-Snake: New Self-Modifying Worm Threatens Networks</h1>

					
											<div class="b-v4-block-container-author">
														By <a href="https://sysdig.com/blog/author/mhernandez/">Miguel Hernández</a> - FEBRUARY 20, 2024						</div>
					
					
					 

    <div class="flex items-center mb-6">
        <p class="font-medium text-sm mb-0 mr-0.5">SHARE:</p>

                    <a class="ml-2.5" style="max-width: 35px; max-height:35px;"
               href="https://www.facebook.com/sharer/sharer.php?u=https://sysdig.com/blog/ssh-snake/" target="_blank">
                <img width="72" height="72" src="https://sysdig.com/wp-content/uploads/facebook-3-logo-1-1.png" class="w-full h-full" alt="" decoding="async" />            </a>
                    <a class="ml-2.5" style="max-width: 35px; max-height:35px;"
               href="https://www.linkedin.com/shareArticle?mini=true&amp;url=https://sysdig.com/blog/ssh-snake/" target="_blank">
                <img width="72" height="72" src="https://sysdig.com/wp-content/uploads/Vector-1-2.png" class="w-full h-full" alt="" decoding="async" />            </a>
                    <a class="ml-2.5" style="max-width: 35px; max-height:35px;"
               href="https://twitter.com/intent/tweet?url=https://sysdig.com/blog/ssh-snake/&amp;text=" target="_blank">
                <img width="256" height="256" src="https://sysdig.com/wp-content/uploads/twitter-x-logo-black-round-20851.svg" class="w-full h-full" alt="" decoding="async" fetchpriority="high" />            </a>
         

        
    </div><!-- b-v4-block-container-social-share -->

									</div>

				<div class="c-v4-m1-hero--lottie col-12 col-md-5 col-lg-4 d-flex">
					<div class="d-flex justify-center align-items-center w-100">
						<div class="b-v4-block-container-img md:mt-12">
							<img width="1201" height="660" src="https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png" class="attachment-full size-full" alt="" decoding="async" loading="lazy" srcset="https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured.png 1201w, https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured-350x192.png 350w, https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured-1170x643.png 1170w, https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured-768x422.png 768w, https://sysdig.com/wp-content/uploads/BlogImages-SSH-SNAKE-featured-175x96.png 175w, / 1w" sizes="(max-width: 1201px) 100vw, 1201px" />						</div>
					</div>
				</div>

			</div>
		</div>
	</div>


	<div class="o-container container b-v4-block-container has-global-padding pb-12 md:pb-24">

	<div class="row justify-content-between">

					
		
			<div class="col-12 col-lg-8 offset-lg-2">

				
				<div class="entry-content wp-block-post-content has-global-padding is-layout-constrained wp-block-post-content-is-layout-constrained"><!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html><body><p>The Sysdig Threat Research Team (TRT) discovered the malicious use of a new network mapping tool called <a href="https://github.com/MegaManSec/SSH-Snake" target="_blank" rel="noreferrer noopener">SSH-Snake</a> that was released on 4 January 2024. SSH-Snake is a self-modifying worm that leverages SSH credentials discovered on a compromised system to start spreading itself throughout the network. The worm automatically searches through known credential locations and shell history files to determine its next move. <strong>SSH-Snake is actively being used by threat actors in offensive operations.</strong>&nbsp;</p>



<p>SSH-Snake activity can be identified by a runtime threat detection tool, such as Sysdig Secure or <a href="https://falco.org/" target="_blank" rel="noreferrer noopener">Open Source Falco</a>.&nbsp; At the end of this post are several Falco rules which can be used to detect this threat.</p>



<h2 class="wp-block-heading" id="h-traditional-ssh-worms">Traditional SSH Worms</h2>



<p>One of the most commonly seen tactics after an attacker gains access to a system is the discovery of other targets and an attempt to reach them, known as <a href="https://attack.mitre.org/tactics/TA0008/">lateral movement</a>.&nbsp;</p>



<p>In previous research, we identified a worm that looked for SSH credentials hosted on the system that could be used to connect to another system and the process repeated. The image below is an example of what was used within the <a href="https://sysdig.com/blog/labrat-cryptojacking-proxyjacking-campaign/">LABRAT</a> dropper.</p>



<figure class="wp-block-image size-large"><img loading="lazy" decoding="async" width="1170" height="433" src="https://sysdig.com/wp-content/uploads/image1-85-1170x433.png" alt="SSH-Snake" class="img-lightbox wp-image-84543" srcset="https://sysdig.com/wp-content/uploads/image1-85-1170x433.png 1170w, https://sysdig.com/wp-content/uploads/image1-85-350x129.png 350w, https://sysdig.com/wp-content/uploads/image1-85-768x284.png 768w, https://sysdig.com/wp-content/uploads/image1-85-1536x568.png 1536w, https://sysdig.com/wp-content/uploads/image1-85-175x65.png 175w, https://sysdig.com/wp-content/uploads/image1-85-1930x713.png 1930w, https://sysdig.com/wp-content/uploads/image1-85.png 1999w, / 1w" sizes="(max-width: 1170px) 100vw, 1170px" /></figure>



<p>SSH-Snake takes this lateral movement concept to another level by being more thorough in its discovery of private keys. By avoiding the easily detectable patterns associated with scripted attacks, this new tool provides greater stealth, flexibility, configurability and more comprehensive credential discovery than typical SSH worms, therefore being more efficient and successful.</p>



<h2 class="wp-block-heading" id="h-ssh-snake">SSH-Snake</h2>



<p>From the <a href="https://github.com/MegaManSec/SSH-Snake" target="_blank" rel="noreferrer noopener">README</a>:</p>



<p>&ldquo;&#128013; SSH-Snake is a powerful tool designed to perform automatic network traversal using SSH private keys discovered on systems, with the objective of creating a comprehensive map of a network and its dependencies, identifying to what extent a network can be compromised using SSH and SSH private keys starting from a particular system.&rdquo;</p>



<figure class="wp-block-image size-large"><img loading="lazy" decoding="async" width="1170" height="636" src="https://sysdig.com/wp-content/uploads/image2-76-1170x636.png" alt="" class="img-lightbox wp-image-84544" srcset="https://sysdig.com/wp-content/uploads/image2-76-1170x636.png 1170w, https://sysdig.com/wp-content/uploads/image2-76-350x190.png 350w, https://sysdig.com/wp-content/uploads/image2-76-768x417.png 768w, https://sysdig.com/wp-content/uploads/image2-76-1536x834.png 1536w, https://sysdig.com/wp-content/uploads/image2-76-175x95.png 175w, https://sysdig.com/wp-content/uploads/image2-76-1930x1049.png 1930w, https://sysdig.com/wp-content/uploads/image2-76.png 1999w, / 1w" sizes="(max-width: 1170px) 100vw, 1170px" /></figure>



<p>SSH-Snake is a bash shell script which autonomously searches the system it is run on for SSH credentials. Once credentials are found, the script attempts to log into the target system and then copies itself there in order to repeat the process. The results of the worm&rsquo;s activity are available to the attacker who can use them later in order to continue their operations.</p>



<h3 class="wp-block-heading" id="h-self-modifying-and-fileless">Self-Modifying and Fileless</h3>



<p>A unique aspect of SSH-Snake is that it modifies itself when it is first run in order to make itself smaller. All comments, whitespace, and unnecessary functions are removed. This is done out of necessity due to the way the shell script passes arguments and allows it to remain fileless. Compared to previous SSH worms, its initial form is much larger due to the expanded functionality and reliability.</p>



<p>The script is essentially plug-and-play, but easily customizable to your use case. You can disable and enable different parts of it, including the different strategies used to discover private keys and the destinations those private keys may be used to connect to. Unlike traditional scripts, SSH-Snake is designed to work on any device. It&#8217;s completely self-replicating and self-propagating &#8212; and completely fileless.</p>



<h3 class="wp-block-heading" id="h-collection">Collection</h3>



<p>SSH-Snake searches for multiple types of private keys located on the target system using a variety of methods. Below is a snippet of code showing where SSH-Snake looks for keys. As you can see, it looks at sources of information, including <em>last</em> and <em>arp</em> to gather target data.&nbsp;</p>



<figure class="wp-block-image size-large"><img loading="lazy" decoding="async" width="1170" height="731" src="https://sysdig.com/wp-content/uploads/image5-33-1170x731.png" alt="" class="img-lightbox wp-image-84547" srcset="https://sysdig.com/wp-content/uploads/image5-33-1170x731.png 1170w, https://sysdig.com/wp-content/uploads/image5-33-350x219.png 350w, https://sysdig.com/wp-content/uploads/image5-33-768x480.png 768w, https://sysdig.com/wp-content/uploads/image5-33-175x109.png 175w, https://sysdig.com/wp-content/uploads/image5-33.png 1518w, / 1w" sizes="(max-width: 1170px) 100vw, 1170px" /></figure>



<p>One of the most interesting features is <em>find_from_bash_history</em>, where commands of <em>ssh</em>, <em>scp</em>, and <em>rsync </em>are searched for and parsed<em>. </em>These entries contain a wealth of knowledge in relation to private key locations, credentials, and targets. For a full explanation of how SSH-Snake works, the author wrote an <a href="https://joshua.hu/ssh-snake-ssh-network-traversal-discover-ssh-private-keys-network-graph" target="_blank" rel="noreferrer noopener">article</a> where he explains it in depth.</p>



<h3 class="wp-block-heading" id="h-operational-use">Operational Use</h3>



<p>Sysdig TRT uncovered the command and control (C2) server of threat actors deploying SSH-Snake. This server holds a repository of files containing the output of SSH-Snake for each of the targets they have gained access to.&nbsp;</p>



<p>Filenames found on the C2 server contain IP addresses of victims, which allowed us to make a high confidence assessment that these threat actors are actively exploiting known Confluence vulnerabilities in order to gain initial access and deploy SSH-Snake. This does not preclude other exploits from being used, but many of the victims are running Confluence.&nbsp;&nbsp;</p>



<p>Output of SSH-Snake contains the credentials found, the IPs of the targets, and the bash history of the victims. We are witnessing the victim list growing, which means that this is an ongoing operation. At the time of writing, the number of victims is approximately 100.</p>



<figure class="wp-block-image size-full"><img loading="lazy" decoding="async" width="1110" height="1664" src="https://sysdig.com/wp-content/uploads/image3-54.png" alt="" class="img-lightbox wp-image-84545" srcset="https://sysdig.com/wp-content/uploads/image3-54.png 1110w, https://sysdig.com/wp-content/uploads/image3-54-350x525.png 350w, https://sysdig.com/wp-content/uploads/image3-54-768x1151.png 768w, https://sysdig.com/wp-content/uploads/image3-54-1025x1536.png 1025w, https://sysdig.com/wp-content/uploads/image3-54-175x262.png 175w, / 1w" sizes="(max-width: 1110px) 100vw, 1110px" /></figure>



<h2 class="wp-block-heading" id="h-detecting-ssh-snake-with-falco">Detecting SSH-Snake with Falco</h2>



<p><a href="https://falco.org/" target="_blank" rel="noreferrer noopener">Falco</a>, an incubating project under the CNCF, provides real-time detection alerts of unusual activities in cloud-native environments. Users have the option to implement the default Falco rules within Falco or create their own custom rules using its straightforward and adaptable language.</p>



<p>Falco can be used to detect the use of SSH-Snake in the runtime using <a href="https://falco.org/docs/reference/rules/default-rules/" target="_blank" rel="noreferrer noopener">default rules</a> that can detect the use of SSH-Snake in runtime, but you can also modify or craft new ones if you want to improve the detection. The default Falco Rules that trigger when SSH-Snake is run on the tool would be:</p>


<pre class="wp-block-code" aria-describedby="shcb-language-1" data-shcb-language-name="Perl" data-shcb-language-slug="perl"><link rel="stylesheet" id="syntax-highlighting-code-block-css" href="https://sysdig.com/wp-content/plugins/syntax-highlighting-code-block/vendor/scrivo/highlight-php/styles/default.css?ver=1.4.0" type="text/css" media="all"><style>.wp-block-code {
	border: 0;
	padding: 0;
	-webkit-text-size-adjust: 100%;
	text-size-adjust: 100%;
}

.wp-block-code > span {
	display: block;
	overflow: auto;
}

.shcb-language {
	border: 0;
	clip: rect(1px, 1px, 1px, 1px);
	-webkit-clip-path: inset(50%);
	clip-path: inset(50%);
	height: 1px;
	margin: -1px;
	overflow: hidden;
	padding: 0;
	position: absolute;
	width: 1px;
	word-wrap: normal;
	word-break: normal;
}

.hljs {
	box-sizing: border-box;
}

.hljs.shcb-code-table {
	display: table;
	width: 100%;
}

.hljs.shcb-code-table > .shcb-loc {
	color: inherit;
	display: table-row;
	width: 100%;
}

.hljs.shcb-code-table .shcb-loc > span {
	display: table-cell;
}

.wp-block-code code.hljs:not(.shcb-wrap-lines) {
	white-space: pre;
}

.wp-block-code code.hljs.shcb-wrap-lines {
	white-space: pre-wrap;
}

.hljs.shcb-line-numbers {
	border-spacing: 0;
	counter-reset: line;
}

.hljs.shcb-line-numbers > .shcb-loc {
	counter-increment: line;
}

.hljs.shcb-line-numbers .shcb-loc > span {
	padding-left: 0.75em;
}

.hljs.shcb-line-numbers .shcb-loc::before {
	border-right: 1px solid #ddd;
	content: counter(line);
	display: table-cell;
	padding: 0 0.75em;
	text-align: right;
	-webkit-user-select: none;
	-moz-user-select: none;
	-ms-user-select: none;
	user-select: none;
	white-space: nowrap;
	width: 1%;
}
</style><span><code class="hljs language-perl shcb-wrap-lines">- rule: Disallowed SSH connection
  desc: Detect any new SSH connection on port <span class="hljs-number">22</span> to a host other than those in an allowed list of hosts.  This rule absolutely requires profiling your environment beforehand.
  Condition: &gt;
inbound_outbound  
<span class="hljs-keyword">and</span> ssh_port  
<span class="hljs-keyword">and</span> <span class="hljs-keyword">not</span> allowed_ssh_hosts
Output: Disallowed SSH Connection (connection=%fd.name lport=%fd.lport rport=%fd.rport fd_type=%fd.type fd_proto=fd.l4proto evt_type=%evt.type user=%user.name user_uid=%user.uid user_loginuid=%user.loginuid process=%proc.name proc_exepath=%proc.exepath parent=%proc.pname command=%proc.cmdline terminal=%proc.tty %container.info)
  priority: NOTICE
</code></span><small class="shcb-language" id="shcb-language-1"><span class="shcb-language__label">Code language:</span> <span class="shcb-language__name">Perl</span> <span class="shcb-language__paren">(</span><span class="shcb-language__slug">perl</span><span class="shcb-language__paren">)</span></small></pre>


<p><strong>Availability:</strong> Falco OSS, Sysdig Runtime Notable Events (Sysdig Secure Policy)</p>


<pre class="wp-block-code" aria-describedby="shcb-language-2" data-shcb-language-name="Perl" data-shcb-language-slug="perl"><span><code class="hljs language-perl shcb-wrap-lines">- rule: Read sensitive file trusted after startup
  condition: &gt; 
    open_read 
    <span class="hljs-keyword">and</span> sensitive_files 
    <span class="hljs-keyword">and</span> server_procs 
    <span class="hljs-keyword">and</span> <span class="hljs-keyword">not</span> proc_is_new 
    <span class="hljs-keyword">and</span> proc.name!=<span class="hljs-string">"sshd"</span> 
    <span class="hljs-keyword">and</span> <span class="hljs-keyword">not</span> user_known_read_sensitive_files_activities
  output: Sensitive file opened <span class="hljs-keyword">for</span> reading by trusted program after startup (file=%fd.name pcmdline=%proc.pcmdline gparent=%proc.aname[<span class="hljs-number">2</span>] ggparent=%proc.aname[<span class="hljs-number">3</span>] gggparent=%proc.aname[<span class="hljs-number">4</span>] evt_type=%evt.type user=%user.name user_uid=%user.uid user_loginuid=%user.loginuid process=%proc.name proc_exepath=%proc.exepath parent=%proc.pname command=%proc.cmdline terminal=%proc.tty %container.info)
  priority: WARNING</code></span><small class="shcb-language" id="shcb-language-2"><span class="shcb-language__label">Code language:</span> <span class="shcb-language__name">Perl</span> <span class="shcb-language__paren">(</span><span class="shcb-language__slug">perl</span><span class="shcb-language__paren">)</span></small></pre>


<p><strong>Availability:</strong> Falco OSS, Sysdig Runtime Notable Events (Sysdig Secure Policy)</p>


<pre class="wp-block-code" aria-describedby="shcb-language-3" data-shcb-language-name="Perl" data-shcb-language-slug="perl"><span><code class="hljs language-perl shcb-wrap-lines">- rule: System user interactive
  condition: &gt; 
    spawned_process 
    <span class="hljs-keyword">and</span> system_users 
    <span class="hljs-keyword">and</span> interactive 
    <span class="hljs-keyword">and</span> <span class="hljs-keyword">not</span> user_known_system_user_login
  output: System user ran an interactive command (evt_type=%evt.type user=%user.name user_uid=%user.uid user_loginuid=%user.loginuid process=%proc.name proc_exepath=%proc.exepath parent=%proc.pname command=%proc.cmdline terminal=%proc.tty exe_flags=%evt.arg.flags %container.info)
  priority: INFO</code></span><small class="shcb-language" id="shcb-language-3"><span class="shcb-language__label">Code language:</span> <span class="shcb-language__name">Perl</span> <span class="shcb-language__paren">(</span><span class="shcb-language__slug">perl</span><span class="shcb-language__paren">)</span></small></pre>


<p><strong>Availability:</strong> Falco OSS, Sysdig Runtime Notable Events (Sysdig Secure Policy)</p>


<pre class="wp-block-code" aria-describedby="shcb-language-4" data-shcb-language-name="Perl" data-shcb-language-slug="perl"><span><code class="hljs language-perl shcb-wrap-lines">- rule: Search Private Keys <span class="hljs-keyword">or</span> Passwords
  condition: &gt;
    (spawned_process <span class="hljs-keyword">and</span>
    ((grep_commands <span class="hljs-keyword">and</span> private_key_or_password) <span class="hljs-keyword">or</span>
    (proc.name = <span class="hljs-string">"find"</span> <span class="hljs-keyword">and</span> (proc.args contains <span class="hljs-string">"id_rsa"</span> <span class="hljs-keyword">or</span> proc.args contains <span class="hljs-string">"id_dsa"</span> <span class="hljs-keyword">or</span> proc.args contains <span class="hljs-string">"id_ed25519"</span> <span class="hljs-keyword">or</span> proc.args contains <span class="hljs-string">"id_ecdsa"</span> <span class="hljs-keyword">or</span> (services_credentials_files))))
  output: Grep private <span class="hljs-keyword">keys</span> <span class="hljs-keyword">or</span> passwords activities detected on %container.name with cmdline %proc.cmdline <span class="hljs-keyword">and</span> parent %proc.pname under user %user.name
  priority: WARNING</code></span><small class="shcb-language" id="shcb-language-4"><span class="shcb-language__label">Code language:</span> <span class="shcb-language__name">Perl</span> <span class="shcb-language__paren">(</span><span class="shcb-language__slug">perl</span><span class="shcb-language__paren">)</span></small></pre>


<p><strong>Availability:</strong> Falco OSS, Sysdig Runtime Threat Detection (Sysdig Secure Policy)</p>



<h2 class="wp-block-heading" id="h-secure-your-cloud-today-with-end-to-end-detection">Secure your cloud today with end-to-end detection</h2>



<p>At the heart of Sysdig Secure lies Falco&rsquo;s unified detection engine. This cutting&#8209;edge engine leverages real&#8209;time behavioral insights and threat intelligence to continuously monitor the multi&#8209;layered infrastructure, identifying potential security breaches. Whether it&rsquo;s anomalous container activities, unauthorized access attempts, supply chain vulnerabilities, or identity&#8209;based threats, Sysdig ensures that organizations have a unified and proactive defense against evolving threats.</p>



<p><a href="https://sysdig.com/request-a-demo/" target="_blank" rel="noreferrer noopener">Dig deeper</a> into how Sysdig provides continuous cloud security across Runtime, AWS, GCP, and Azure.</p>



<h2 class="wp-block-heading" id="h-conclusion">Conclusion</h2>



<p>SSH-Snake is an evolutionary step in the malware commonly deployed by threat actors. It is smarter and more reliable which will allow threat actors to reach farther into a network once they gain a foothold. The usage of SSH keys is a recommended practice that SSH-Snake tries to take advantage of in order to spread. It is also fileless, which can make static detection difficult.</p>



<p>That&#8217;s why a runtime solution, such as Sysdig Secure and Falco, are necessary. Detecting attacks as soon as they happen allows you to speed up the investigation process and will keep your exposure to a minimum.</p>
</body></html>
</div>			</div>

							<div class="col-12">
				<div class="wp-block-rb-pathfactory-concierge">
					<div id="pf-concierge"></div>
				</div>
			</div>
		
		    
	    <div class="col-12">
	    <div class="c-banner c-banner-form c-form col-12 mt-10 py-14 px-8 lg:py-12 lg:px-14 t-gray--bg-gray-60 t-dark--bg-gray-60 t-gray--text-white t-dark--text-white">
    <div class="row items-center">
        <div class="col-12 col-lg-7 flex flex-column">
			                <p class="h5 mb-6 lg:mb-0">Subscribe and get the latest updates</p>
						        </div>

        <div class="col-12 col-lg-5 flex flex-col justify-start items-start md:flex-row lg:justify-end md:items-center">
                <div class="u-spinner js-spinner__3811">
        <div class="u-spinner__cube1"></div>
        <div class="u-spinner__cube2"></div>
    </div>
    <form data-submit-button="Submit" data-formID="3811" data-formInstance="one" data-formTemplate="newsletter" style="display: none;" class="sysdig-form  columns-single" data-successType="success-message" data-recaptcha="false"></form>
    <div id="success-message" style="display: none;">
		<p class="font-family-karla c-heading mb-0">Thank You For Signing Up!</p>    </div>
    <div id="error-message" style="display: none;">
    <div class="col u-align-width-wide c-form-contact">
        <div class="js-success-message col-md-12 text-center">
            <p class="c-heading text-black text-center mb-6">This form failed to load.</p>
            <p class="c-subhead c-subhead--sans text-center text-bluish-grey mb-6">An ad blocking extension or strict tracking protection is preventing this form from loading. Please temporarily disable ad blocking or whitelist this site, use less restrictive tracking protection, or enable JavaScript to load this form. If you are unable to complete this form, please email us at <a href="/cdn-cgi/l/email-protection#4f3c2e232a3c0f3c363c2b2628612c2022"><span class="__cf_email__" data-cfemail="b0c3d1dcd5c3f0c3c9c3d4d9d79ed3dfdd">[email&#160;protected]</span></a> and a sales rep will contact you.</p>
        </div>
    </div>
</div>        </div>
    </div>
</div>	    </div>
	</div>
</div>


</div><!-- #content -->

<footer id="site-footer" class="c-site-footer bg-gray-80">

    
        <div class="c-site-footer__top">
            <div class="o-container container">
                <div class="row">
                    <div class="col-12 pt-12 pb-0 md:pt-32 md:pb-0">
                        <ul id="menu-footer" class="navbar-nav grid grid-cols-2 md:grid-cols-5 gap-5"><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="not-link menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item"><span>Products</span>
<ul class="sub-menu">
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/products/platform/" class="flex align-items-center">Sysdig Secure</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/products/monitor/" class="flex align-items-center">Sysdig Monitor</a></li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="not-link menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item"><span>Partners</span>
<ul class="sub-menu">
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/partners/" class="flex align-items-center">Sysdig Partners</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-post_type menu-item-object-page nav-item"><a href="https://sysdig.com/deal-registration/" class="flex align-items-center">Deal Registration</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-post_type menu-item-object-page nav-item"><a href="https://sysdig.com/partnerships-contact/" class="flex align-items-center">Partner Signup</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-post_type menu-item-object-page nav-item"><a href="https://sysdig.com/partner-locator/" class="flex align-items-center">Partner Locator</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-post_type menu-item-object-page nav-item"><a href="https://sysdig.com/integrations/" class="flex align-items-center">Integrations</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://partnercentral.sysdig.com/" target="_blank" class="flex align-items-center">Partner Portal</a></li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="not-link menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item"><span>Company</span>
<ul class="sub-menu">
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/about/" class="flex align-items-center">About Us</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/company/leadership/" class="flex align-items-center">Leadership</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/careers/" class="flex align-items-center">Careers</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/newsroom/" class="flex align-items-center">Newsroom</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/contact-us/" class="flex align-items-center">Contact Us</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/legal/" class="flex align-items-center">Legal</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/sitemap/" class="flex align-items-center">Sitemap</a></li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="not-link menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item"><span>Support</span>
<ul class="sub-menu">
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/support/" class="flex align-items-center">Support</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://cx.sysdig.com/s/web-to-case/" target="_blank" class="flex align-items-center">Request Support</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://kb.sysdig.com/" target="_blank" class="flex align-items-center">Knowledgebase</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/company/sysdig-status/" target="_blank" class="flex align-items-center">Sysdig Status</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://docs.sysdig.com/" target="_blank" class="flex align-items-center">Documentation</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/support/customer-success/" class="flex align-items-center">Customer Success</a></li>
</ul>
</li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="not-link menu-item menu-item-type-custom menu-item-object-custom menu-item-has-children nav-item"><span>Social</span>
<ul class="sub-menu">
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://twitter.com/sysdig" target="_blank" class="flex align-items-center"><img width="14" height="14" src="https://sysdig.com/wp-content/uploads/twitter.svg" class="menu-item--icon h-auto mr-2.5" alt="" decoding="async" loading="lazy" />Twitter</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://github.com/draios" target="_blank" class="flex align-items-center"><img width="17" height="16" src="https://sysdig.com/wp-content/uploads/github.svg" class="menu-item--icon h-auto mr-2.5" alt="" decoding="async" loading="lazy" />Github</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://slack.sysdig.com/" target="_blank" class="flex align-items-center"><img width="17" height="17" src="https://sysdig.com/wp-content/uploads/slack.svg" class="menu-item--icon h-auto mr-2.5" alt="" decoding="async" loading="lazy" />Slack</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://www.youtube.com/sysdig" target="_blank" class="flex align-items-center"><img width="17" height="14" src="https://sysdig.com/wp-content/uploads/youtube.svg" class="menu-item--icon h-auto mr-2.5" alt="" decoding="async" loading="lazy" />Youtube</a></li>
	<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="https://www.linkedin.com/company/sysdig/" target="_blank" class="flex align-items-center"><img width="15" height="15" src="https://sysdig.com/wp-content/uploads/linkedin.svg" class="menu-item--icon h-auto mr-2.5" alt="" decoding="async" loading="lazy" />LinkedIn</a></li>
</ul>
</li>
</ul>                    <hr class="border-primary md:mt-10" />
                    </div>
                </div>
            </div>
        </div>

    
    <div class="c-site-footer__bottom py-8 md:py-8 pb-24 md:pb-32">
        <div class="o-container container">
            <div class="row">
                <div class="col-12">
                    <div class="md:grid grid-cols-5 gap-5 items-center">
                        <div class="w-24 lg:col-span-2 mb-8 md:mb-0">
                            <img width="154" height="46" src="https://sysdig.com/wp-content/uploads/sysdig-logo-new-white.svg" class="attachment-full size-full" alt="" decoding="async" loading="lazy" />                        </div>
                        <div class="md:col-span-4 lg:col-span-3 md:flex">
                            <ul id="menu-footer-bottom" class="navbar-nav inline-flex flex-col md:flex-row flex-grow justify-between gap-4"><li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="not-link menu-item menu-item-type-custom menu-item-object-custom nav-item"><span>® Copyright 2024 Sysdig, Inc.</span></li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/legal/privacy-policy/" class="flex align-items-center">Privacy Policy</a></li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/legal/subprocessors/" class="flex align-items-center">Subprocessors</a></li>
<li itemscope="itemscope" itemtype="https://www.schema.org/SiteNavigationElement" class="menu-item menu-item-type-custom menu-item-object-custom nav-item"><a href="/legal/trust-center/" class="flex align-items-center">Trust Center</a></li>
</ul>                        </div>
                    </div>
                </div>
            </div>
        </div>
    </div>

</footer>

</div><!-- #page --><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script><script type="text/javascript" src="https://sysdig.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1" id="jquery-core-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1" id="jquery-migrate-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/public/scripts/slick.min.js?ver=1.8.1" id="slick-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/assets/scripts/vendor/popper.min.js?ver=6.4.3" id="popper-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/assets/scripts/vendor/bootstrap.min.js?ver=4.0.0" id="sysdig-bootstrap-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/assets/scripts/vendor/ekko-lightbox.min.js?ver=20220602-1330" id="ekko-lightbox-js"></script>
<script type="text/javascript" id="v4-sysdig-main-js-extra">
/* <![CDATA[ */
var sysdigLocalizedObject = {"ajaxUrl":"https:\/\/sysdig.com\/wp-admin\/admin-ajax.php","rest_url":"https:\/\/sysdig.com\/wp-json\/","nonce":"87fec36990","nonce_chaos":"8c197f4f3d","page_id":"84542"};
/* ]]> */
</script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/public/scripts/main-v4.js?ver=1707271338" id="v4-sysdig-main-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/public/scripts/rddl.js?ver=1707271339" id="v4-sysdig-rddl-js"></script>
<script type="text/javascript" src="https://app.cdn.lookbookhq.com/libraries/overlay/overlay.js?ver=2024-01-29" id="pathfactory-overlay-lib-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/public/scripts/pathfactory-overlay.js?ver=2024-01-29" id="pathfactory-overlay-js"></script>
<script type="text/javascript" src="https://go.sysdig.com/js/forms2/js/forms2.min.js?ver=2023-07-07" id="forms2-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/assets/scripts/dev/lib/teknkl-formsplus-core-1.0.8.js?ver=1.0.8" id="teknkl-formsplus-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/assets/scripts/dev/components/rb-marketo-forms.js?ver=1707271312" id="marketo-forms-js"></script>
<script type="text/javascript" src="https://www.google.com/recaptcha/api.js?render=6LdNcz8cAAAAAJuTxEErvwDxSyMsMZTAgCJqmIov&amp;ver=2022-03-02" id="google-recaptcha-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/public/scripts/components/announcement-bar.js?ver=20230221-1053" id="announcement-bar-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/public/scripts/components/anchors.js?ver=1707271338" id="sysdig-anchors-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/assets/scripts/dev/lib/teknkl-simpledto-2.0.4.js?ver=2.0.4" id="teknkl-simpledto-js"></script>
<script type="text/javascript" src="https://sysdig.com/wp-content/themes/sysdig/assets/scripts/dev/components/dto.js?ver=20231012-1624" id="marketo-dto-js"></script>
	</body> 
</html>
  	
</main><!-- #main --></div><!-- #primary -->